Security fixes are provided for the latest release.

Please use GitHub's Report a vulnerability feature in the repository's Security tab. Do not open a public issue for an undisclosed vulnerability.

Include the affected version, reproduction steps, expected impact and a minimal test document when one is needed. Remove private documents, API keys, tokens and personal data before attaching files.

For ordinary bugs, use the public bug-report issue template.